26dcfd84f9be4d4410f2b550fdb16fe6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26dcfd84f9be4d4410f2b550fdb16fe6_JaffaCakes118
Size

52KB
MD5

26dcfd84f9be4d4410f2b550fdb16fe6
SHA1

e802f61d727da62503cac50469235f3e1c7d11f7
SHA256

60b9ce6f4659871384fa5d6be1745908c54e6cdb1a64177d4c8faf6bc14c970e
SHA512

61d97fe4a9e751b84d0aa6c4248c79fc45c9ecd9dcc49093449d9eed5fdc5225c541379e6e354bcc46ca8d2dcf4d2786e6e18e16cfb8f21742914621b98b85cc
SSDEEP

1536:4Q3gDdOyEaLQDxWVt6kFIutpGKirtTYQ0xgkwanbNCcy:ZmQqQD8bTqApGZxTYQ0GdWbNhy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26dcfd84f9be4d4410f2b550fdb16fe6_JaffaCakes118

Files

26dcfd84f9be4d4410f2b550fdb16fe6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 46KB - Virtual size: 808KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE